NetSight
IP …
medium5.0Public exploit code

CVE-2003-0621

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths i…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.

Affected products

VendorProductAffected versions
BeaTuxedo
Versions 6.3, 6.4, 6.5, 7.1, 8.0, 8.1
BeaWeblogic Server
Versions 4.2, 5.0.1, 5.1

References